Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qyUzFifP26NSVHHnE_zx0iyo0IU.roa
File:                     qyUzFifP26NSVHHnE_zx0iyo0IU.roa (raw, json)
Hash identifier:          7W56MEG2MlqBlFKGbAzm6mokJ7B8gngZ35Z2pscNM0o=
Subject key identifier:   AB:25:33:16:27:CF:DB:A3:52:54:71:E7:13:FC:F1:D2:2C:A8:D0:85
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4B894F94446AE2AC4DEF6789C5DE394E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qyUzFifP26NSVHHnE_zx0iyo0IU.roa
Signing time:             Thu 31 Aug 2023 12:20:04 +0000
ROA not before:           Thu 31 Aug 2023 12:20:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4b:89:4f:94:44:6a:e2:ac:4d:ef:67:89:c5:de:39:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 12:20:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab25331627cfdba3525471e713fcf1d22ca8d085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:f2:b1:43:61:7a:27:da:2e:a1:9a:36:95:
                    ad:93:c1:4b:92:31:42:b5:c5:04:98:6b:2b:24:79:
                    86:4e:c3:88:24:9d:d1:6c:b4:2f:03:00:7b:00:16:
                    eb:a3:16:d9:33:77:1e:1a:0c:f1:b8:28:12:b2:43:
                    55:a1:0d:f6:b7:fa:0c:e1:55:33:79:d3:a9:d6:14:
                    bb:e4:58:36:da:6f:0a:a0:b7:8c:8c:5f:b5:7c:c3:
                    bd:6d:a4:ac:65:11:87:55:eb:c5:03:0d:cb:6f:4f:
                    a5:0c:6b:97:5f:d8:5f:04:bd:fc:9f:df:a2:f3:bf:
                    d9:50:6b:f8:ff:f1:f0:92:98:d5:a4:3b:33:b0:a8:
                    bf:cc:b4:89:92:8f:22:bd:0c:2c:38:37:c8:60:ef:
                    73:e5:4a:58:7f:c7:10:3c:4e:8c:2a:c4:df:8b:bd:
                    7e:89:2b:1e:35:54:a9:9a:90:cc:de:f9:73:be:38:
                    2e:32:43:52:68:51:df:4b:f2:04:5e:94:6c:56:b6:
                    a8:d8:73:81:cc:cb:8a:d3:69:d3:a3:f7:d9:80:f4:
                    f4:10:a3:77:21:fc:d0:1d:1b:0f:ba:d3:3d:9e:b7:
                    12:68:2d:db:14:51:98:56:b9:dd:9b:77:3e:cb:95:
                    c9:08:6d:9c:12:37:15:9e:25:37:d2:b5:87:aa:8e:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:25:33:16:27:CF:DB:A3:52:54:71:E7:13:FC:F1:D2:2C:A8:D0:85
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qyUzFifP26NSVHHnE_zx0iyo0IU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:54:60:c9:85:2e:c8:38:af:b8:b0:60:97:22:73:73:a0:ea:
         a5:66:d3:ee:6c:c8:c9:28:c5:ad:75:d3:dd:dd:d4:ba:71:58:
         fb:ef:92:44:05:45:e9:fe:92:21:cb:66:37:d9:35:0b:bd:7e:
         d3:cf:0c:ff:6c:5b:4b:5f:8a:4c:68:0b:7d:24:d0:25:e3:2c:
         b3:52:4b:e4:6c:df:85:6e:3c:2c:6b:a0:ad:ef:20:74:bc:dd:
         d3:92:0b:25:2b:d9:04:09:31:fd:45:8e:06:3a:01:6d:70:6b:
         d9:8b:1b:62:53:64:23:7b:2b:87:81:a3:0a:96:6c:f0:b9:0f:
         cd:72:de:a3:a4:f0:da:e1:17:e8:ef:8a:fb:39:b1:87:32:18:
         4b:67:34:77:04:6f:09:d6:aa:a2:e5:ec:c3:95:4e:f3:0c:8c:
         1a:14:d1:a8:f0:5d:ca:4a:07:f4:cc:f1:04:f0:da:22:ff:2a:
         f9:c3:dc:39:7c:a2:8b:92:3c:26:14:ce:09:23:ae:9f:06:25:
         a6:55:d9:9c:3d:ca:bd:95:a9:e9:33:ce:10:34:f9:47:af:17:
         43:4d:d2:d0:63:22:2d:d7:ad:81:c9:8b:a5:d6:a4:43:21:cb:
         b0:b3:0a:ab:08:60:4f:4f:4c:d2:66:91:e0:ce:08:53:72:db:
         82:83:86:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----